last executing test programs:

5.610679906s ago: executing program 3 (id=342):
r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5)
open$dir(&(0x7f0000000280)='./file0\x00', 0x80, 0x106)
open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120)
r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x22)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000001200)='#!', 0x2}, {&(0x7f0000000040)="f5", 0x1}], 0x2)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0)
rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001100)='./file0\x00')
ioctl$WSKBDIO_GETMAP(0xffffffffffffffff, 0x80047476, &(0x7f0000000100)={0x0, 0x0})
r3 = fcntl$getown(0xffffffffffffffff, 0x5)
fcntl$setown(0xffffffffffffffff, 0x6, r3)
fcntl$setown(0xffffffffffffffff, 0x6, r3)
r4 = shmget$private(0x0, 0x4000, 0x201, &(0x7f0000321000/0x4000)=nil)
shmctl$IPC_SET(r4, 0x1, &(0x7f0000000300)={{0x10001, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x70, 0xfe00}, 0xf, 0x6a07, 0x0, 0xffffffffffffffff, 0x1, 0xad6, 0x10001})
shmctl$IPC_STAT(r4, 0x2, &(0x7f00000007c0)=""/68)
r5 = geteuid()
shmctl$IPC_SET(r4, 0x1, &(0x7f0000000380)={{0x6, r5, 0x0, 0x0, 0x0, 0x84, 0x2}, 0xf0c, 0x5, 0x0, 0x0, 0xc, 0x1, 0x5})
r6 = getegid()
r7 = getpid()
getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000900)={0x0, <r8=>0x0}, &(0x7f00000008c0)=0xc)
getgid()
getpgrp()
r9 = getuid()
chown(&(0x7f0000000040)='./file0\x00', r9, 0x0)
r10 = getgid()
r11 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000940), 0x80, 0x0)
openat$tty(0xffffffffffffff9c, &(0x7f0000000980), 0x200, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000000840)=[{&(0x7f00000002c0)="1e44fa51b2971455eb52fea15a7df8420a5bfca10fb0830ae6f416b81c21cd7594dac0bf14261818dbdd7aae1f2802e3732fba335b1c726d32a2ed226f3a77544a5870551cbf5b7f064525e22e84b4f58c624bcfd9fef4aefb3f62ad38c636af712ba3e4039d46b005468b4c8b2a9269c0702053979fc90cbd782f56d1bb1f3933ae1feb4480cafdf6b1b4d4f81dc3f9a6c2d4529722b0fc8d955d0ecb4a1b87666c3c775cefcd764462b29342135135a95618ca2ba703", 0xb7}, {&(0x7f00000004c0)="20fe1f56d0d6c294ac6c272212ed18087a3d3176625347bbf368615dbba66f5e75442d5ecd56fcfc96523d0096617ad21cc2a738db77b7d4afca5b303bc1f095916a6dff146081baa1141475f0b34bb202efa609cea5ef315958f1416b73cc986a21549eb02aea437c089f7ba8254d764d19ebde0d09f45376c02b91f7cf9cba13a15d83d228fd4fa077ff4acf0eaf8ba87a84b2c5db8f81417edadf806a3aa0b83c8b38a292587f61ba537a0a4c3fe8f49f804320bfdc140d656b8846c3709b94788b3d24029968a26a56cde9e6a053f3521601c1415e59f8a3d013db874838aab00a056a32ae0605e4dbb110a3837ba8abca41d635", 0xf6}, {&(0x7f00000003c0)="ec5366a6ab31514ce93588051db782221098f189a5118637b9481ad6f1a0af708e64bb86d7f3ffde066c6b93a92eee8bc6369ef807b09ae2621f52efa5a591b11aa6c0d0072cab4997e841d0804b073f6c926338d2b556b4b243e43a360b5a69029a493c87d96635c1051dd0acc55661e13c051264f45ad07c6f0d956c6e2d11850f9392a2ae3964eae5d843b25a550488646611f1a398c12ba6ae2f", 0x9c}, {&(0x7f00000005c0)="ee60f09d522902ba13e7a4006ae31f89d3f416ee356cbd384113b9837baded5420706bd684f04056a011c14db9b4999dd3218c83a021a1ea49b3a18d219731549bfe87c93b1b888d75628d8e560b9aceae14632c92e1cc6e1ad834bffaf795f9d5dee2d05f0be2e528e07101f14861e209a0899916abf2bd9dd713c8f1c58ed7d5bab061fe471e40dc09756753099fbf9bb50e2eb97c88a7d4d7242f65396b024023e9e69b859d0da9adad3bda5611e1090d0973371469de3e8b", 0xba}, {&(0x7f0000000680)="7ad763d26b13961d24c8d555d40914bbfdcab8c79124ad36558f54a4673767711768b9bec33ff8ab82c2699ffeda3c639269047f4f86a6f40d74cafc0b23c14ffb87092060b9a028018735022f2abb0fb1179cce03d6e1519ddc04aab9f173a65a1579e1c53582610104275a96b16aad65f06a5dc0ec14", 0x77}, {&(0x7f0000000700)="8e6f8befce57ad080f5effb384533ddbb58ca63773b61ee6d2cb9a4856d8eaa73108fa155269e58ddc4d88f4e396cd8185aaa611d7515276f6b42859ec1d9ef3d785a82492c0cd5c6e487428cf5c87468735281437ca8b2e30422c8799489e9a1193f30a36a9b2", 0x67}, {&(0x7f0000000780)="6cc9e9b502b53358dfdc8e62144071e61cd4fa8a1e0046b973ef8371197aaece5c73af1e6866b5c87414b0572efcf9746b5d9d3c2eab008f9defdf055cad3b462b4dab842a556e5b10d2ca10a006f37ff56237005b1ca5ccbf51c9e208241a1e250f", 0x62}, {&(0x7f0000000180)="b8be62e44cf4429a03c776b3c3f172dd583be8461365f11b0b809e694c13682a04", 0x21}], 0x8, &(0x7f0000000c00)=ANY=[@ANYRES16=0x0, @ANYRES64=r4, @ANYBLOB="253ea20ea67a310f7578cef6d717d84c581150c47253f021e1bd2b999d1e73d17074d4528019387bdd565adea77d10e8626331b7d596177c5d86313a528847490c640d9237dcc7d1b458be34f8ea0b956f9d3f28e6caff9c46c94981c6beca7641cafd2c1d913de9b249837501f176d6d4ba1b7bb1dc2ced0ca85cf62ae760ec1dda0424bb972c29e4a9a1701db831d7bb7836eae1fe5eeb31ae3dcd75f1a5b9776600345c360c3bce712eab956f41f4cd38e064f6c5", @ANYRES32=r6, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES8=r3, @ANYRES32=r9, @ANYRES32=r10, @ANYRES16=r1, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r11, @ANYRES32=0x0, @ANYRESDEC=r8], 0x88, 0x4}, 0xa)
execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$WSDISPLAYIO_ADDSCREEN(r0, 0x80245753, &(0x7f00000000c0)={0x5, './file0\x00', './file1\x00'})
ioctl$WSKBDIO_SETMODE(r0, 0x80045713, &(0x7f0000000000))

5.450918037s ago: executing program 3 (id=351):
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb8848b22f125369ef0fcc3a68a4dd69f5f7f78c21bc983092a86510625e7d17bda2cd0525245657e30ee4dc82d475a06c1883bf467f7b8a6de64629a3f0550cd3bb6fbdb38a6b7e7f18fa0508850ce323ca38ba98bce2b1946f81c3bbccf9648183c81114738d92c0820e47616cee8574f061375b78b5fdc84a7015118c320cc620892b3760a49f2c07d1375d4489851f78e99a518357ec6aa61bcac5a37a1fab8472368f4b00491f0674"])

5.334191309s ago: executing program 3 (id=354):
r0 = socket(0x2, 0x1, 0x0)
r1 = socket(0x800000018, 0x1, 0x0)
listen(r1, 0x1)
shutdown(r0, 0x1)
shutdown(r0, 0x2)
openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x31538169f8e90eb1, 0x0)
select(0x40, &(0x7f0000000d80)={0x8, 0xfffffffffffffc00, 0x80, 0xd, 0xbc, 0x0, 0x7, 0x8}, &(0x7f0000000dc0)={0x9, 0x22, 0x4, 0x7fffffff, 0x1ff, 0x1, 0xf7, 0x2}, 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)

5.331868678s ago: executing program 3 (id=356):
setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, &(0x7f00000000c0)={0x0, 0x5ff}, 0x10)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x0}, 0x8)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x1, 0x1, 0x0)
flock(r0, 0xe)
close(r0)
socket(0x18, 0x3, 0x0)
setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
r1 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)='#!', 0x2}, {&(0x7f0000000240)="7119", 0x2}], 0x2)
write(r1, &(0x7f0000000180)="092020090900db0000ff4278ad535c2a415642000000005624b77b6a0a", 0x1d)
execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c)
fchmodat(0xffffffffffffffff, 0x0, 0x104, 0x4)
setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56})
r2 = syz_open_pts()
close(r2)
r3 = syz_open_pts()
ioctl$FIOASYNC(r2, 0x80047466, &(0x7f0000000200)=0x5)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSBRK(r3, 0x2000747b)
read(r2, &(0x7f0000000400)=""/213, 0xd5)
r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x20000, 0x40)
unlinkat(r4, &(0x7f0000000080)='./file0\x00', 0x8)

3.502364022s ago: executing program 7 (id=397):
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffff9, 0x0, 0x20, 0x3}], 0x1000003, 0x0, 0x0, 0x0)
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x6012, r0, 0xffffffffffff1a7f)
accept$unix(r1, &(0x7f0000000240)=@abs, &(0x7f0000000280)=0x8)
setuid(0xee01)
sysctl$net_pipex(&(0x7f00000000c0)={0x4, 0x22, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$net_pipex(&(0x7f00000000c0)={0x4, 0x22, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0)
setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff})
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket(0x2, 0x3, 0x0) (async)
r2 = socket(0x2, 0x3, 0x0)
connect$unix(r2, &(0x7f0000000000), 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x800, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x10002, 0x10, [{0x10000000, 0x7, 0x824, 0x71000}, {0x7b86, 0x8, 0x9, 0xfffffff9}, {0x7, 0x8000b86, 0xffffff7c, 0x9}, {0x73f0, 0x8800, 0x80000001, 0x2}, {0x401, 0x2, 0x2800, 0x7}, {0x2, 0xc, 0x3, 0x99}, {0xcdf, 0xdf61, 0x200004f9, 0x10}, {0x6, 0x4, 0x14, 0xb}, {0x2, 0x82, 0x4, 0x3}, {0x4, 0x28101, 0x93, 0x1ff}, {0x1e0, 0x10001, 0xffffffff, 0x3}, {0x9, 0x29, 0x9, 0x5}, {0xb8c, 0xc3b, 0x80000003, 0x404}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0xc, 0xffffff04, 0x6, 0x2200}, {0xfffffffd, 0xbc3d, 0x4, 0x30005}]})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async)
ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0})
ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x4c})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
sendmmsg(r2, &(0x7f0000000380)={0x0, 0x8}, 0x10, 0xa) (async)
sendmmsg(r2, &(0x7f0000000380)={0x0, 0x8}, 0x10, 0xa)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="00e0ae5b7e0d0000bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x50, 0x0, 0x37)
pipe2(&(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
writev(r4, &(0x7f0000000140)=[{&(0x7f0000001040)="bd", 0x1}], 0x1)
read(r5, &(0x7f0000000180)=""/148, 0x94) (async)
read(r5, &(0x7f0000000180)=""/148, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)

1.536475032s ago: executing program 5 (id=465):
mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
readlinkat(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000400)=""/156, 0x9c) (async)
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x400016, 0x1, 0xff, 0x80000004, 0x80000003, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x70fff}, {0x7, 0x8, 0x8, 0xfffffff9}, {0x2, 0xf86, 0x3, 0x9}, {0x8000001, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0xfffffff9, 0x6, 0xffffffff, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x0, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x7fff, 0xd1b, 0x88}, {0x81d, 0x7, 0xa, 0x3}, {0x7ff, 0xb, 0x8, 0x9}, {0xb8c, 0x5, 0x8, 0x4}, {0x281, 0xfffffffa, 0x1, 0x1}, {0xc, 0x7, 0x5, 0x4}, {0x0, 0x1, 0x1002}]}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
acct(&(0x7f0000000540)='./file0\x00')
ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async)
ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x7, 0x0})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5010, 0xffffffffffffffff, 0x0) (async, rerun: 32)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) (async, rerun: 32)
r1 = open(&(0x7f00000004c0)='./bus\x00', 0x200, 0x0)
preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0)
r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x53}, 0x2, &(0x7f0000000180)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082f9740f62f49ead69c9b3b32c84f8d320018983cea251ec1a2350c127dcdf7c69e1f0e8247ea3b5df5b16134f032c75405a000048044f2c0495f1496131b46051a74f58c9fcbec9fd0312aa24f63eb91489a05c8cf36b67310f648b950e7e7ca075ed83ed454a949c585f359084bd96d93a33c82ae1124227ed69ab8942a9ab7e", &(0x7f0000000080)=0xfeba, 0x0, 0x0) (async)
chroot(0x0) (async, rerun: 64)
r3 = semget(0x0, 0x1, 0x281) (rerun: 64)
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async, rerun: 32)
open(&(0x7f0000000000)='./file0\x00', 0x4, 0x0) (async, rerun: 32)
chflagsat(r1, &(0x7f0000000500)='./bus\x00', 0x10001, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async)
select(0x40, &(0x7f00000005c0)={0xfffffffffffffff9, 0x44809e9d, 0x2, 0xffffffffffffffff, 0x2800000000000000, 0x2000000181f, 0x100000a, 0x2000000000000004}, 0x0, 0x0, 0x0)
ioctl$WSKBDIO_GETENCODINGS(r1, 0xc0105715, &(0x7f0000000580)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
select(0x40, &(0x7f0000000180)={0xffff, 0x44809e9d, 0xffffffffffffffff, 0xfffff7fffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c)
r4 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0)
preadv(r4, &(0x7f0000001700)=[{&(0x7f0000001580)=""/114, 0x72}], 0x1, 0x10001) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
unveil(0x0, &(0x7f00000000c0)='x\x00')
semop(r3, &(0x7f0000000000), 0x23) (async, rerun: 64)
ioctl$TIOCSETA(r2, 0xcd50441a, &(0x7f0000000180)={0x3, 0x2, 0x200, 0x2f, "1800e6234f5d7a0000005409456200", 0x3, 0x7}) (rerun: 64)

1.534175244s ago: executing program 6 (id=466):
setrlimit(0x8, &(0x7f00000000c0)={0x8, 0x54})
r0 = syz_open_pts()
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc)
mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02)
select(0x40, &(0x7f0000000040)={0x8001, 0x5, 0x10000, 0x8000000000000003, 0x2, 0x5, 0xbaa, 0x2a}, 0x0, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x140)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$VNDIOCSET(r2, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0})
close(r0)
r3 = syz_open_pts()
ioctl$TIOCSETAF(r3, 0x802c7416, &(0x7f0000000180)={0x42978c, 0xd11, 0xfffbfc03, 0x80a19a, "bb080006020900d91050080000000f00", 0xc, 0x6})
ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000340)={0xe, 0x2, 0x80000000, 0x6, 0xa, 0x10000, 0x501a, 0x10, [{0x90, 0xfd21, 0x7, 0x6}, {0xbb6, 0x0, 0x6, 0x777}, {0x5, 0x7, 0x81, 0x200}, {0x0, 0x1, 0x8, 0x1}, {0x4, 0x7, 0x5, 0x100}, {0xb1e4, 0x3ff, 0xfff}, {0x1, 0x9, 0xffffffff, 0x9}, {0x16, 0x6, 0x10}, {0xd, 0x17, 0x4, 0x4}, {0x3, 0x9c, 0x1, 0x1}, {0xffffffff, 0x8, 0x9, 0x8}, {0x424, 0x9a0, 0x8, 0x3}, {0x9, 0x2, 0x6, 0x4}, {0x8bc, 0x4, 0x200, 0x6}, {0x5, 0xfffffff3, 0x7, 0x7}, {0xfffffffc, 0x9, 0xf, 0x800}]})
writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1)

1.393254683s ago: executing program 5 (id=471):
r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$PCIOCREAD(r0, 0xc0107002, &(0x7f0000000080))
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x41, 0x0)
pwrite(r1, &(0x7f00000005c0)="4b091a4060be5adacde8e4da15a3d86f35076d1631481cdf7090e1ba8ae967e8fd31e9656c1770f28c97d8377622bda4b05208f9d8e9fef8efa451530d24a553355224d366ca7bd04a67e836a466d907e24cea5b740013304fa2c4a669ee43f4ce6eff588909c18f90f0b6f6f9a8defa46254405d36d7cac6c6a58b98c8c21cf1a8af49eeb15d0de56f704f69a01a0c8a466c2e128297ba7936624903707b57c2957ab79561a166264f12c2ca4cd929f96df13d0605ba67973d541e3ef7532f6267925620bf3441f0c40", 0xca, 0x9)
syz_emit_ethernet(0xe, &(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES64=r0])
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = socket(0x2, 0x2, 0x0)
bind(r2, &(0x7f0000000000), 0x10)
connect$unix(r2, &(0x7f0000000000), 0x10)
r3 = socket(0x2, 0x2, 0x0)
connect(r2, &(0x7f00000002c0)=@un=@file={0x0, './file0\x00'}, 0xa)
connect$unix(r3, &(0x7f0000000000), 0x10)
write(r3, 0x0, 0x0)
getrlimit(0x9, 0x0)
execve(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)=[&(0x7f0000000080)='-/@h#[#)\x00', &(0x7f00000000c0)='\x00'], &(0x7f0000000300)=[&(0x7f0000000140)='\x00', &(0x7f0000000180)='#\x00', &(0x7f00000001c0)='.%\x00', &(0x7f0000000200)='+\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='\'{[[-,%#:!}\xdb\x00'])
r4 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
ioctl$VNDIOCCLR(r4, 0xc0a86b03, &(0x7f0000000200)={0x0, 0x10000, 0x0})
ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000400)={0x2, 0x1, 0x7, 0x6, "6b03c19a5ee759373987edd9ce0ede16c813b8c0", 0x2, 0x6})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = socket$unix(0x1, 0x5, 0x0)
dup2(r5, r6)
bind$unix(r7, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa)
listen(r5, 0x0)
select(0x40, &(0x7f0000000040)={0xfd}, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000380)="6a485ae9e958678e1206b43cfe269c5e2feeefea03f2548bfe12976d2bf06e6ef1abb549e5978a1f678c66d9a26ec29641183e6ce08aa1248cbd5cd07e8af2c42130fe463e", 0x45)

1.387012539s ago: executing program 4 (id=475):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000180)={'tap', 0x0})
sendmsg(0xffffffffffffffff, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/113, 0x71}, 0x1802)
accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, ""/93}, &(0x7f00000001c0)=0x5f)
recvfrom$unix(0xffffffffffffff9c, &(0x7f00000003c0)=""/70, 0x46, 0x800, &(0x7f0000000480)=@abs={0x0, 0x0, 0x3}, 0x8)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61})
r1 = syz_open_pts()
close(r1)
r2 = syz_open_pts()
ioctl$FIOASYNC(r1, 0x80047470, &(0x7f0000000000)=0x1)
open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r3, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
r4 = kqueue()
kevent(r4, &(0x7f0000000080), 0xe4a, 0x0, 0x4000a9fa, 0x0)
setrlimit(0x1, &(0x7f00000011c0))
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000080)=""/43, 0x24}], 0x1000000000000247)
ioctl$FIOASYNC(r2, 0x80047460, &(0x7f00000000c0)=0x4)
ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x1, 0x6, 0x7, 0x4}, {0xc0, 0x5, 0x7, 0x8004}, {0x6, 0x0, 0xa, 0x8}]})
syz_emit_ethernet(0x1000e, &(0x7f0000000500)=ANY=[@ANYBLOB="5fbc953311f537b9c59c2b9d552cf8226d7676180e26515de312133f0737265e068bb045872d067dd886e8debf63616114a7c0ba6e14c64a709a3043795b27febc3240924c4b84fd6de1906f55ed765beb61cb63e753c206a40a82d3659c0570457c0b788e1ca56de04a5f43119d1abb17def9a1090e06a5352e4cc0242ee5a07abef4a326e0793197a392b924214f4e134b866969e998a759e0c47b6f51d42dbfb190787ba6808b01bc9d6a07b04614eceb005bc97d3657537470af52616d8fe722c3a42a492cb08788b9d85137c334c53e291465cfca9cd4532f888ae26051f442f2"])

1.169413254s ago: executing program 2 (id=482):
r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x100, 0x110)
write(r1, &(0x7f0000000000)="b96abcf5ac7cffa09ea845315c0d853a14", 0xfffffffffffffd24)

1.161184671s ago: executing program 2 (id=484):
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, &(0x7f0000000000))
r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@in, &(0x7f0000000080)=0xc)
ioctl$FIONREAD(r0, 0x4004667f, &(0x7f00000000c0))
r1 = accept$unix(r0, &(0x7f0000000100)=@file={0x0, ""/503}, &(0x7f0000000300)=0x1f9)
sendto$unix(r1, &(0x7f0000000340)="007f32cecf3487bafef5edf8787adbea764c4eba03be901745ff6695a2f8abd0c99dce8f6ea6bc1591e5cef18015c9ea3431a1f1391fb3142808a634b6e705c1d757e9e96f2114d94dc4b36e3c3434dc3dac35b8ccd78ad638badbaebc77cfaa4ac46950724e1bbb35ace22790a51ba42e444c3a7f5bf3244ae643d56630cd9536e2649fd28e2cb4a903dde5633a3f1d8cdb4f6e2bffdd", 0x97, 0x404, 0x0, 0x0)
ioctl$FIOGETOWN(r1, 0x4004667b, &(0x7f0000000400))
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000440)={0x1, 0x853a, 0xf5, 0x7, "c7b5bf9f274d5ca5a9d3ba8dbbd6d69ef7e509fe", 0x9, 0x9})
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000480)={0x0, <r2=>0x0, <r3=>0x0}, &(0x7f00000004c0)=0xc)
setuid(r2)
bind$unix(r1, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0xa)
connect$unix(r0, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0xa)
r4 = open$dir(&(0x7f0000000580)='./file0\x00', 0x80, 0x100)
fchownat(r4, &(0x7f00000005c0)='./file0\x00', r2, r3, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x400, 0xa)
ioctl$TIOCMBIS(r5, 0x8004746c, &(0x7f0000000640)=0x5)
ioctl$BIOCGDLTLIST(r5, 0xc010427b, &(0x7f00000006c0)={0x3, &(0x7f0000000680)=[0xffffffff, 0x7, 0x631e]})
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1)
linkat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', r4, &(0x7f0000000740)='./file0\x00', 0x0)
pread(r0, &(0x7f0000000780)="765b2f287d8215c9825b61745b2d8d5a68b97ba7c89205e857bd21d0b34a57675e7d6a99feec0a1090be8f388a3fc5b3c9002cfc9beb236518e9b0b0b5eda389cd49e4f05f7516dcb4a592c60aae89aa90f531f595d6e56144656c3e1daffa182abc463013b2e2110e10d25d38568bd157fad7e30e1cf360f5846829f2bc6cfd3b16f567d558036f1c2149b5f5e331933da81338fc5e989a219ba9e424096786f00e7c03bd0f1c0a53f48af6f13e4d9930b1b0a9077622dbd5c78313e6449141f2a1dd0ee3a7b8a0de3468df", 0xcc, 0x9)
read(r4, &(0x7f0000000880)=""/232, 0xe8)
syz_extract_tcp_res(&(0x7f0000000980)={0x41424344, <r6=>0x41424344}, 0x5, 0x60000000)
syz_emit_ethernet(0x3ac, &(0x7f00000009c0)={@broadcast, @empty, [{[{0x88a8, 0x6, 0x1, 0x3}], {0x8100, 0x6, 0x1}}], {@ipv6={0x86dd, {0xe, 0x6, "763a13", 0x36e, 0x70, 0x8, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[@fragment={0xa2, 0x0, 0xd, 0x0, 0x0, 0x4, 0x65}, @fragment={0x4, 0x0, 0x9, 0x1, 0x0, 0x5, 0x67}, @dstopts={0x2c, 0x22, '\x00', [@ra={0x5, 0x2, 0x1}, @pad1, @jumbo={0xc2, 0x4, 0x9}, @pad1, @generic={0x1, 0xf7, "1d7dd667bc62bcd8b3183fbf4a0bf1c1f94f32ded5b1700c1b6fb049537eac4bd1d0992ddf81addf7243eaa864f3adebccdec58d666948442235069cb60be8eb2664d09a60a5a2b3baa5150cfcdac83e3271e19e73eb083a8f77b08ad0a7e78821e67323026ab536c9786fc20af038e07ff8c39c04e5f8c4fb3858d1258e14db7b3de9fa8ba302a64b03c451ffc5e470192d46e90947d39aa460d8b7ae3be8def77b7c63b37c4e3288adc1b697dd0b4f430ee803463feac87d9384d5b603e5935f1176497162d1595ee266d8a1d51d12f06066caa60fad8a506cb2f0ec80130ae0bda85b0bfe1478dd9ced6a0887a94b6a9219ecba7918"}, @ra={0x5, 0x2, 0xd03}, @padn={0x1, 0x1, [0x0]}]}, @fragment={0x50, 0x0, 0x1, 0x1, 0x0, 0x7, 0x67}, @hopopts={0x2f, 0x1c, '\x00', [@generic={0x33, 0xda, "49afa2e1a7b6fa7244edebfd223d03d3213adeff7fc0d79c773ba67d79c0d8f3b1e3cbf942583190e50dcba67612124812cf30148b7550ba9534be2f72a943c878ba1f857f7f0d459d149a5bd3dff5b2186d3b9e8f14cdf0f870eeb53a85f201d63fbee2f15fc5cf5227168d90940543a1a3f253c0e6e6c83db0b34a9d0e733fbc70c63c65416615fa64beb35b2967b98a806ec28a1430fd9278b0729554b0fa8ec791b8c9d4fccdd362efad87dd1d3e9dee4ecd8c1b14b010d129b1b43d5aeba7297eb2ba34e36f749c4b54699710fb53a5c5c5c051d47e1414"}, @ra={0x5, 0x2, 0x6}]}, @fragment={0x3a, 0x0, 0x3b, 0x1, 0x0, 0x1d, 0x67}, @dstopts={0x0, 0x3, '\x00', [@enc_lim, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x37, 0x0, 0x0, 0x0, 0x0, 0x5, 0x68}, @routing={0x2e, 0x10, 0x0, 0x5, 0x0, [@loopback, @remote={0xfe, 0x80, '\x00', 0x0}, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @empty, @mcast2, @local={0xfe, 0x80, '\x00', 0x0}]}], @tcp={{0x3, 0x2, r6, 0x41424344, 0x1, 0x0, 0xc, 0x2, 0xc163, 0x0, 0x2, {[@mss={0x2, 0x4, 0x8c1}, @sack={0x5, 0x12, [0x8, 0xaf, 0x9, 0x9]}, @eol, @mss={0x2, 0x4, 0x8}]}}, {"7a3f0f6942cea2c35fa0d07aaef271d9dde3220e087c1376245c84aa7589896bec96d38620f92e1de75fbea625f915202eed06a2e8d3aec3981468dc92b276a3adcefd03f1c9a6ac4096e61b8311a4280227450cdf66527798e143fd8a36cea20361c079d8e8"}}}}}}})
r7 = socket$inet(0x2, 0x2, 0xfe)
ioctl$VMM_IOC_RESETCPU(r5, 0x82405605, &(0x7f0000000d80)={0x8, 0x0, {[0x7, 0xa1e, 0x8c9, 0x5, 0x81, 0x9ed5, 0x8, 0xd, 0xa07, 0x8, 0x9, 0x0, 0x3, 0x3, 0x0, 0xd9e, 0xd7a, 0x7fffffff], [0x9, 0x5, 0x4, 0x7fffffffffffffff, 0x8, 0xef, 0x9, 0x3, 0xc000000000000, 0x4], [0x100000001, 0xffffffffffffffff, 0x89ac, 0x800, 0x9, 0x3, 0xcab4], [0x8, 0x1, 0x7, 0xdbc, 0x2, 0x6], [{0x1ff, 0x1, 0x10000, 0x40}, {0x1, 0x401, 0xf63, 0x1}, {0x6, 0x2, 0x1f, 0x2}, {0xf, 0x8, 0x8495, 0xff}, {0x3a73, 0x1, 0x5, 0x8b}, {0x81, 0x7, 0x0, 0x9}, {0x2a6d, 0x1, 0x2, 0x1ff}, {0x400, 0x0, 0x3, 0x5c}], {0x6f96, 0x7, 0x2, 0x8000000000000001}, {0x7, 0xa3e, 0x7, 0x800}}})
poll(&(0x7f0000000fc0)=[{r7, 0x80}], 0x1, 0xfffffff8)
r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000001000), 0x40560, 0x0)
ioctl$BIOCSETWF(r8, 0x80104277, &(0x7f0000001080)={0x4, &(0x7f0000001040)=[{0xa36, 0x0, 0xbd, 0x3}, {0xfff, 0x9, 0x8, 0x400}, {0x1, 0x6b, 0x2, 0xc7}, {0x34c9, 0x6, 0x2, 0x3}]})
ioctl$TIOCSDTR(r5, 0x20007479)
ioctl$TIOCCHKVERAUTH(r5, 0x2000741e)

1.160310022s ago: executing program 1 (id=485):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x70e, 0x0)
mmap(&(0x7f000000f000/0x2000)=nil, 0x2000, 0x0, 0x8010, r1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x4)
ftruncate(r2, 0x8531)
madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x0)
sysctl$net_inet6_ip6(&(0x7f00000001c0)={0x4, 0x18, 0x29, 0x2b}, 0x4, &(0x7f0000000200)="d74c1513100785c12b59fff430d50c862c03", &(0x7f0000000280)=0x12, &(0x7f0000000000)="01000000", 0x4)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1ff)
sysctl$net_pipex(0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)
msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4)

1.15955891s ago: executing program 0 (id=486):
kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x6b, 0x11, 0x200000000000001}], 0x203, 0x0, 0x0, 0x0) (async)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)
setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async)
ioctl$WSKBDIO_SETBELL(0xffffffffffffffff, 0x80105703, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x3}) (async)
sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14)

1.138631409s ago: executing program 4 (id=487):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x8)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0)
ioctl$TIOCGETD(r1, 0x4004741a, &(0x7f0000000300)) (async)
ioctl$TIOCGETD(r1, 0x4004741a, &(0x7f0000000300))
r2 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff)
ioctl$WSKBDIO_GETMAP(r2, 0x8004745d, &(0x7f0000000080)={0x0, 0x0}) (async)
ioctl$WSKBDIO_GETMAP(r2, 0x8004745d, &(0x7f0000000080)={0x0, 0x0})

1.006566918s ago: executing program 1 (id=488):
setreuid(0xee00, 0x0)
r0 = getuid()
open$dir(&(0x7f00000000c0)='./file2\x00', 0x200, 0x0)
seteuid(r0)
unveil(&(0x7f0000000400)='./file2\x00', &(0x7f0000000440)='c\x00')
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x1, 0x4}, {0x0, 0x1}, {0x0, 0x7}, {}, {}, {0x0, 0x10000}, {0x2}, {0x1, 0xffffffff}, {}, {}, {0x0, 0x1ff}, {0x1}, {0x0, 0x1000}, {0x3, 0x4}, {}, {0x2, 0x3}, {0x3, 0x100}, {}, {0x0, 0x7ff}, {0x5}, {0x0, 0x4}, {0x3}, {0x0, 0x400}, {}, {0x2}, {0x0, 0xfffffffd}, {}, {0x3}, {}, {0x1, 0xe}, {0x1}]})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0)
mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x1, 0x13f)
open(&(0x7f0000001780)='./file0\x00', 0x3c, 0x160)
select(0x40, &(0x7f0000000000)={0x8, 0x3ff, 0x0, 0x0, 0x0, 0x2, 0x44f, 0x6}, &(0x7f0000000040)={0xffb, 0x8, 0x2006, 0x7, 0x2, 0x0, 0x2}, 0x0, 0x0)
select(0x40, &(0x7f0000000000)={0x8, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x44f, 0x6}, &(0x7f0000000040)={0xffb, 0x8, 0x2006, 0x7, 0x800000000000002, 0x0, 0x7f}, 0x0, 0x0)
r1 = kqueue()
kevent(r1, 0x0, 0x8, 0x0, 0x15, 0x0)
r2 = open(0x0, 0x0, 0x22)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a)
r3 = socket(0x2, 0x3, 0x2f)
r4 = dup(r3)
setsockopt$inet_opts(r4, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r5 = socket(0x6, 0x3, 0x0)
r6 = dup(r4)
dup2(r6, r5)
connect$unix(r5, &(0x7f0000000000), 0x10)
sendto$inet(r4, &(0x7f00000001c0)="5e1351d18b9da08c", 0x90, 0x0, 0x0, 0x0)

1.006322469s ago: executing program 0 (id=489):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0)
utimensat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x0, 0xfffffffffffffffe}, {0x10000000000000}}, 0x2)

1.005944523s ago: executing program 4 (id=490):
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02)
kqueue()
pipe2(0x0, 0x10004)
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x200, 0xe8)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r0, 0xffffffffffff0000)
mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20, 0x9)

1.005568366s ago: executing program 1 (id=491):
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x3ffffffffffffc2a, 0x0, 0x0, &(0x7f0000000080)="e5f1c9aaa07ab80fbd151b7d246aafa521dabc570083ef874476630ed5e67efa7151fd9d52478427f9b1c30f70037bd1168ef63ca9c1841030ec51011a1cc665aa02aa4dc0c1acde1b3053a5c2e432bf9bb09fc5404568d57a95a5c1bcfdaf4d14f71af82c765263eb3950917a67f29bb8b00767450772fa56892e8dc4d1c579cc6a4b572fc9863f2767d771e31762b089aa19d1d70f426b84b8cb5d09498ce92d1c7b0df6", 0xa5)

857.278013ms ago: executing program 4 (id=492):
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) (async)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0)
poll(&(0x7f00000000c0)=[{r0, 0xae98cd7e8d4e801f}], 0x1, 0x9) (async)
poll(&(0x7f00000000c0)=[{r0, 0xae98cd7e8d4e801f}], 0x1, 0x9)
close(r0)
r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c)
fchmodat(r1, 0x0, 0x10f, 0x6)

856.242793ms ago: executing program 1 (id=493):
unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='c\x00')
open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x2)

855.752697ms ago: executing program 0 (id=494):
open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) (async)
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)
setuid(0xffffffffffffffff) (async)
r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$VNDIOCCLR(r0, 0x80384601, &(0x7f00000001c0)={0x0, 0x4c, 0x0}) (async)
sysctl$net_inet_divert(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mknod(0x0, 0x2, 0x5200) (async)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="c0", 0x1}], 0x1) (async)
sysctl$kern(&(0x7f0000000040)={0x1, 0x55}, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffdf8) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x1e, 0x6, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) (async)
sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) (async)
r1 = getpid()
ktrace(&(0x7f00000001c0)='./file0\x00', 0x0, 0x40000534, r1)

854.387525ms ago: executing program 7 (id=495):
r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@un=@file={0x0, ""/4103}, &(0x7f0000001040)=0x1009)
close(r0)
pipe2(&(0x7f0000001080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
ioctl$FIONREAD(r2, 0x4004667f, &(0x7f00000010c0)) (async, rerun: 32)
ioctl$TIOCCDTR(0xffffffffffffffff, 0x20007478) (async, rerun: 32)
ioctl$WSMOUSEIO_SETMODE(0xffffffffffffff9c, 0x80045726, &(0x7f0000001100)={0x1}) (async)
ioctl$FIOGETOWN(r0, 0x4004667b, &(0x7f0000001140)) (async)
ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000001180)) (async)
ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000001200)={0x1, &(0x7f00000011c0)=[{0xfff, 0x4, 0x80, 0xf43}]})
ioctl$BIOCSFILDROP(r1, 0x80044279, &(0x7f0000001240)=0x7)
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0)
ioctl$BIOCSDLT(r3, 0x8004427a, &(0x7f00000012c0)=0x4b) (async)
mknod$loop(&(0x7f0000001300)='./file0\x00', 0x40, 0x0) (async)
write(r3, &(0x7f0000001340)="b2228a8fde700b440ebd1e919afde0cbeed5fd22f39e8327c1c86aaa71b7c6cf38d1ab2343b354ee2253021fd64551f7264163f9ae9dfac0da9341a01feced9b00322bbb8c40c178984ec42d9afc978359f2cf7d9df742b2ce8dd5e4b36058922c2ccd2136a1c2ffc4c22c6e211e43b1cb299bb5ed267c35a55e6a367e25272af7a03fd86abb20c41673f7a8b21b28f8f8be91a2b7d75d9e3684ef993fc5ba31215e297f9c229b69ccbcd7ba64cd311f711fdd5376b988d713841e908b", 0xbd) (async)
ioctl$BIOCGETIF(r3, 0x4020426b, &(0x7f0000001440)={""/16, @ifru_data=&(0x7f0000001400)="27f1610142d4fb8d872ab7053a36ba0d80edc22b640341"}) (async)
r4 = getuid()
seteuid(r4)
ioctl$BIOCGFILDROP(r2, 0x40044278, &(0x7f0000001480))
chflags(&(0x7f00000014c0)='./file0/file0\x00', 0x10001) (async)
mkdirat(r1, &(0x7f0000001500)='./file0\x00', 0x16) (async)
ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000001540)={0x4, 0xfffffff7, 0x9, 0xfffff800, "a6ed7f5b94f6a9b8aa5b4af27e34f301ed9e078f", 0x9})
rmdir(&(0x7f0000001580)='\x00') (async, rerun: 32)
unveil(&(0x7f00000015c0)='./file0/file0\x00', &(0x7f0000001600)='x\x00') (rerun: 32)
stat(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680))
sendto(r0, &(0x7f0000001700)="73f938a381238138a3c734ee513d86d5", 0x10, 0x4, 0x0, 0x0)
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000001980)={0x0, 0x0, <r5=>0x0}, &(0x7f00000019c0)=0xc) (async)
r6 = fcntl$getown(r3, 0x5) (async)
r7 = getpgid(0xffffffffffffffff) (async)
r8 = getuid()
sendmsg$unix(r0, &(0x7f0000001b40)={&(0x7f0000001740)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000001940)=[{&(0x7f0000001780)="31ca5a052c95fc2190add71d040271ec535dad4476c0218cd327f692da787975aff21f130cd3e663fa4677d3412ba87b07db365b01e7eb6f5355c124722953658581920b534e002552f682f19bf3c05a79bd809a289382e222f11fb27de9d224d15e8c7079d1bf232d", 0x69}, {&(0x7f0000001800)="3a9e1249ae3e6d5d3a5d5f0c684fb4f0481b83a74ea937c1646bc2cfb5560efd66f8f92733800393f44c6e742ead3a45336476f9540853c201ca3f36ccf067d80566d63bf647d24a22c9ff0f91a61381396b7c4d82dca7fdac644af0be12d6771ea6087d4b9f05f2b17ebfcde2d35030f161a7bce30f33ac732b645e0d6442b03c16f81cec391d59a3be48f51c01f0aa8c02359a561b7b15b03038a2060a5bb59320147a8b4f0d0cd05631b20eb62a0dc3626ca86b7884d83c1600faf78f48bba84e702228ca1a170cca64881bd1a31609c61a41bbcc95687d60106b0c76f0", 0xdf}, {&(0x7f0000001900)="010eca52b2b27c722b539c0c7f5a051f1251e500857aafaff4d2550df536d96f4ad467a55919f7a488c55d64c575", 0x2e}], 0x3, &(0x7f0000001a80)=[@cred={0x20, 0xffff, 0x0, 0x0, r4, r5}, @cred={0x20, 0xffff, 0x0, r6, r4}, @cred={0x20, 0xffff, 0x0, r7, r8}, @cred={0x20}, @cred={0x20}], 0xa0, 0x402}, 0x400)

845.892413ms ago: executing program 4 (id=496):
setitimer(0x2, 0x0, 0x0)

845.456219ms ago: executing program 0 (id=497):
setgid(0x0)
setuid(0xee01)
r0 = semget$private(0x0, 0x3, 0xc05)
semctl$GETPID(r0, 0x7, 0x4, &(0x7f0000001200)=""/180)
ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)})
r1 = socket(0x10, 0x2, 0x7)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/232, 0xe8}, 0x0)
r4 = socket(0x11, 0x3, 0x0)
setsockopt(r4, 0x11, 0x1, &(0x7f0000000000), 0x0)
sendmsg(r2, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0)
r5 = socket(0x18, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff)
close(r6)
open(0x0, 0x78e, 0x8)
sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x23, 0x1}, 0x3, &(0x7f0000000040)="8cfa426e59ca195c162494ad71231aadec203422e7ade70dd0d67b2272fd62d81ebb2b425c1493052018b35474c37fb5c82a39e41498617884c2f602e6dbc05c64455577edc6c3f0f4ae6609da8a3bf0c25ceb7dd518948a60d638ac9012eba57102f810f11294325d1dc343bdf122e6", &(0x7f00000000c0)=0x70, &(0x7f0000000200)="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", 0x1000)
ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0))
r7 = socket(0x18, 0x2, 0x0)
setitimer(0x2, &(0x7f0000000140)={{0x4, 0x85}, {0xd, 0x5}}, &(0x7f0000000180))
ioctl$FIONREAD(r7, 0x81206919, &(0x7f0000000100))

844.798051ms ago: executing program 1 (id=498):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0})
ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x50, 0x1, 0x27, 0x845e}, {0x400e, 0x1, 0x53, 0x7fe}]})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[])
sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x7}, 0x85c, 0x8000000000000007, 0x0, 0x0, 0x1, 0x7b, 0x7, 0x4})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x2}, 0x2, 0x0, 0x0, 0x0, 0x0)
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x400e, 0x2, 0x53, 0x4001}]})
r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
ioctl$BIOCIMMEDIATE(r3, 0x80044270, &(0x7f0000000140)=0x5)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BIOCSETWF(r3, 0x8010427f, &(0x7f0000000180)={0x0, 0x0})
socket$inet(0x2, 0xbb14dc938889ada5, 0x5)
sysctl$net_inet6_ip6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)="79040f91f15da040473675618dcd42b074", 0x11)
r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x8)
mknodat(r4, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361)
r5 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VNDIOCCLR(r5, 0xc0a86b04, &(0x7f0000000200)={0x0, 0x10000, 0x0})
shmget$private(0x0, 0x1000, 0x1, &(0x7f00000c8000/0x1000)=nil)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37)

607.305009ms ago: executing program 4 (id=499):
r0 = syz_open_pts()
fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x1000100000000})
r1 = socket(0x18, 0x3, 0x0)
ioctl$FIONREAD(r1, 0x80047308, &(0x7f0000000100))
flock(r0, 0x3)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = socket(0x2, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000000), 0x10)
setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f0000000100)=0x7, 0x4)
sendto$inet(r2, &(0x7f0000000280)='u', 0x1, 0x21, 0x0, 0x0)
ioctl$TIOCSTSTAMP(0xffffffffffffffff, 0x8008745a, &(0x7f0000000040)={0x20e89, 0xd})
syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"])
r3 = socket(0x11, 0x3, 0x0)
sendto$unix(r3, &(0x7f0000000040)="b1000501000000ae05000701070000000000000010000500fef96ecfc72fd3357ae30200004e30ffd2d236acf20bf404be01000000f7c8cf5f882b297be1aa050400ce94e2f0ad3ebbc23de4411f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300000100be1f25a2e791505c47f8343712cc11ffffffffffffffffffffffffffff0000ed007f62b60be8b90000000000000000", 0xb1, 0x8, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r4 = socket(0x2, 0x1, 0x0)
connect$unix(r4, &(0x7f0000000000), 0x10)
r5 = socket(0x800000018, 0x2, 0x0)
bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
setsockopt(r5, 0x1000000000029, 0x1b, &(0x7f0000000000)="c04a1190", 0x4)
setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14)
shutdown(r4, 0x2)
flock(r0, 0x3)
clock_gettime(0x3, 0xfffffffffffffffe)

606.483565ms ago: executing program 7 (id=500):
r0 = socket(0x18, 0x2, 0x0)
r1 = socket(0x800000018, 0x2, 0x0)
shutdown(r0, 0x0)
openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
syz_emit_ethernet(0x299, &(0x7f0000001240)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3f, 0x28b, 0x0, 0x5, 0x4}, @generic="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"}}}})
syz_emit_ethernet(0x122, &(0x7f0000000200)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x114, 0x0, 0x2000, 0x4, 0x0, 0x0, @rand_addr}, @tcp={{0x3, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x7, 0x0, 0xf3}, {"a30e76cb3f6121b2d66550f5fd227c6cec208240e1fd4b42301fbce20dca03b048c1f7d03ef0c1695badab700c5bd7ffafeab2cafc67e4ee6bc4b704da7f72bd92dc8ca145ab196319a64fba250c317ac4ce2c0e3c4e2afbc156f50f848b7e45e8133dbd035e7e2fc2847f9751d836de04e527c46587a830fff210efd250da4f72dfde1b0ee3f77ea5efa03015857225e13612f518c39feab00a51c323d2509829fb72b5af2e23bdbc4a22196a14a7a175e38b1aa5333e657ba7e7c770144b4250c7e92558d04f0c0939c2dfdfedc38c4d0f6a894342cbc97a116e106ae2be206b538d3dbc5ab23296712e22"}}}}}})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0)
r3 = fcntl$dupfd(r2, 0x3, 0xffffffffffffffff)
r4 = getegid()
getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, <r5=>0x0}, &(0x7f00000000c0)=0xc)
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, <r6=>0x0}, &(0x7f00000001c0)=0xc)
r7 = getgid()
setgroups(0x4, &(0x7f0000000340)=[r4, r5, r6, r7])
ioctl$WSKBDIO_GETMAP(r3, 0x8004745d, &(0x7f0000000080)={0x0, 0x0})
sysctl$kern(&(0x7f0000000100)={0x1, 0x48}, 0x2, &(0x7f0000000140)="13835dd75dba", &(0x7f0000000240)=0x6, &(0x7f0000000280), 0x0)

604.570971ms ago: executing program 6 (id=501):
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc1", 0x2}], 0x1) (async)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00070100000000", 0xc)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async)
ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x538, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8000, 0xee4bce5bb233ab95) (async)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x3ff}, 0x400, 0x10000, 0x0, 0x0, 0x200000001, 0x80000000000010c, 0x4, 0x7}) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffff6, 0x1000100010008, 0xffffffffffffffff}) (async)
r1 = kqueue() (async)
r2 = socket(0x18, 0x1, 0x0)
setsockopt(r2, 0x1000000029, 0x38, 0x0, 0x0)
kevent(r1, &(0x7f0000000000), 0x400, &(0x7f00000002c0), 0x5f, 0x0)
getuid() (async)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
fcntl$lock(r3, 0x7, &(0x7f00000003c0)={0x2, 0x1, 0x7fffffffffffffff, 0x1ffffffff}) (async)
r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$TIOCSETA(r4, 0xcd504404, &(0x7f0000000080)={0xfffffffe, 0x80000002, 0x1, 0xba, "cdad140800e30000000000f742000000008000", 0x5, 0x9})
r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async)
ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000400)=[{0x80, 0x25, 0x97, 0x5}, {0xc0, 0x10, 0x5, 0x4}, {0x9e, 0x1a, 0x0, 0x3}]})
write(r5, &(0x7f0000000080)="d81ad3d20cf7eb4e9b0800bc1a30", 0xe) (async)
poll(&(0x7f0000000080)=[{r1, 0x27}], 0x1, 0x0)

602.125219ms ago: executing program 2 (id=484):
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, &(0x7f0000000000))
r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@in, &(0x7f0000000080)=0xc)
ioctl$FIONREAD(r0, 0x4004667f, &(0x7f00000000c0))
r1 = accept$unix(r0, &(0x7f0000000100)=@file={0x0, ""/503}, &(0x7f0000000300)=0x1f9)
sendto$unix(r1, &(0x7f0000000340)="007f32cecf3487bafef5edf8787adbea764c4eba03be901745ff6695a2f8abd0c99dce8f6ea6bc1591e5cef18015c9ea3431a1f1391fb3142808a634b6e705c1d757e9e96f2114d94dc4b36e3c3434dc3dac35b8ccd78ad638badbaebc77cfaa4ac46950724e1bbb35ace22790a51ba42e444c3a7f5bf3244ae643d56630cd9536e2649fd28e2cb4a903dde5633a3f1d8cdb4f6e2bffdd", 0x97, 0x404, 0x0, 0x0)
ioctl$FIOGETOWN(r1, 0x4004667b, &(0x7f0000000400))
ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000440)={0x1, 0x853a, 0xf5, 0x7, "c7b5bf9f274d5ca5a9d3ba8dbbd6d69ef7e509fe", 0x9, 0x9})
getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000480)={0x0, <r2=>0x0, <r3=>0x0}, &(0x7f00000004c0)=0xc)
setuid(r2)
bind$unix(r1, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0xa)
connect$unix(r0, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0xa)
r4 = open$dir(&(0x7f0000000580)='./file0\x00', 0x80, 0x100)
fchownat(r4, &(0x7f00000005c0)='./file0\x00', r2, r3, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x400, 0xa)
ioctl$TIOCMBIS(r5, 0x8004746c, &(0x7f0000000640)=0x5)
ioctl$BIOCGDLTLIST(r5, 0xc010427b, &(0x7f00000006c0)={0x3, &(0x7f0000000680)=[0xffffffff, 0x7, 0x631e]})
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1)
linkat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', r4, &(0x7f0000000740)='./file0\x00', 0x0)
pread(r0, &(0x7f0000000780)="765b2f287d8215c9825b61745b2d8d5a68b97ba7c89205e857bd21d0b34a57675e7d6a99feec0a1090be8f388a3fc5b3c9002cfc9beb236518e9b0b0b5eda389cd49e4f05f7516dcb4a592c60aae89aa90f531f595d6e56144656c3e1daffa182abc463013b2e2110e10d25d38568bd157fad7e30e1cf360f5846829f2bc6cfd3b16f567d558036f1c2149b5f5e331933da81338fc5e989a219ba9e424096786f00e7c03bd0f1c0a53f48af6f13e4d9930b1b0a9077622dbd5c78313e6449141f2a1dd0ee3a7b8a0de3468df", 0xcc, 0x9)
read(r4, &(0x7f0000000880)=""/232, 0xe8)
syz_extract_tcp_res(&(0x7f0000000980)={0x41424344, <r6=>0x41424344}, 0x5, 0x60000000)
syz_emit_ethernet(0x3ac, &(0x7f00000009c0)={@broadcast, @empty, [{[{0x88a8, 0x6, 0x1, 0x3}], {0x8100, 0x6, 0x1}}], {@ipv6={0x86dd, {0xe, 0x6, "763a13", 0x36e, 0x70, 0x8, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[@fragment={0xa2, 0x0, 0xd, 0x0, 0x0, 0x4, 0x65}, @fragment={0x4, 0x0, 0x9, 0x1, 0x0, 0x5, 0x67}, @dstopts={0x2c, 0x22, '\x00', [@ra={0x5, 0x2, 0x1}, @pad1, @jumbo={0xc2, 0x4, 0x9}, @pad1, @generic={0x1, 0xf7, "1d7dd667bc62bcd8b3183fbf4a0bf1c1f94f32ded5b1700c1b6fb049537eac4bd1d0992ddf81addf7243eaa864f3adebccdec58d666948442235069cb60be8eb2664d09a60a5a2b3baa5150cfcdac83e3271e19e73eb083a8f77b08ad0a7e78821e67323026ab536c9786fc20af038e07ff8c39c04e5f8c4fb3858d1258e14db7b3de9fa8ba302a64b03c451ffc5e470192d46e90947d39aa460d8b7ae3be8def77b7c63b37c4e3288adc1b697dd0b4f430ee803463feac87d9384d5b603e5935f1176497162d1595ee266d8a1d51d12f06066caa60fad8a506cb2f0ec80130ae0bda85b0bfe1478dd9ced6a0887a94b6a9219ecba7918"}, @ra={0x5, 0x2, 0xd03}, @padn={0x1, 0x1, [0x0]}]}, @fragment={0x50, 0x0, 0x1, 0x1, 0x0, 0x7, 0x67}, @hopopts={0x2f, 0x1c, '\x00', [@generic={0x33, 0xda, "49afa2e1a7b6fa7244edebfd223d03d3213adeff7fc0d79c773ba67d79c0d8f3b1e3cbf942583190e50dcba67612124812cf30148b7550ba9534be2f72a943c878ba1f857f7f0d459d149a5bd3dff5b2186d3b9e8f14cdf0f870eeb53a85f201d63fbee2f15fc5cf5227168d90940543a1a3f253c0e6e6c83db0b34a9d0e733fbc70c63c65416615fa64beb35b2967b98a806ec28a1430fd9278b0729554b0fa8ec791b8c9d4fccdd362efad87dd1d3e9dee4ecd8c1b14b010d129b1b43d5aeba7297eb2ba34e36f749c4b54699710fb53a5c5c5c051d47e1414"}, @ra={0x5, 0x2, 0x6}]}, @fragment={0x3a, 0x0, 0x3b, 0x1, 0x0, 0x1d, 0x67}, @dstopts={0x0, 0x3, '\x00', [@enc_lim, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x37, 0x0, 0x0, 0x0, 0x0, 0x5, 0x68}, @routing={0x2e, 0x10, 0x0, 0x5, 0x0, [@loopback, @remote={0xfe, 0x80, '\x00', 0x0}, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @empty, @mcast2, @local={0xfe, 0x80, '\x00', 0x0}]}], @tcp={{0x3, 0x2, r6, 0x41424344, 0x1, 0x0, 0xc, 0x2, 0xc163, 0x0, 0x2, {[@mss={0x2, 0x4, 0x8c1}, @sack={0x5, 0x12, [0x8, 0xaf, 0x9, 0x9]}, @eol, @mss={0x2, 0x4, 0x8}]}}, {"7a3f0f6942cea2c35fa0d07aaef271d9dde3220e087c1376245c84aa7589896bec96d38620f92e1de75fbea625f915202eed06a2e8d3aec3981468dc92b276a3adcefd03f1c9a6ac4096e61b8311a4280227450cdf66527798e143fd8a36cea20361c079d8e8"}}}}}}})
r7 = socket$inet(0x2, 0x2, 0xfe)
ioctl$VMM_IOC_RESETCPU(r5, 0x82405605, &(0x7f0000000d80)={0x8, 0x0, {[0x7, 0xa1e, 0x8c9, 0x5, 0x81, 0x9ed5, 0x8, 0xd, 0xa07, 0x8, 0x9, 0x0, 0x3, 0x3, 0x0, 0xd9e, 0xd7a, 0x7fffffff], [0x9, 0x5, 0x4, 0x7fffffffffffffff, 0x8, 0xef, 0x9, 0x3, 0xc000000000000, 0x4], [0x100000001, 0xffffffffffffffff, 0x89ac, 0x800, 0x9, 0x3, 0xcab4], [0x8, 0x1, 0x7, 0xdbc, 0x2, 0x6], [{0x1ff, 0x1, 0x10000, 0x40}, {0x1, 0x401, 0xf63, 0x1}, {0x6, 0x2, 0x1f, 0x2}, {0xf, 0x8, 0x8495, 0xff}, {0x3a73, 0x1, 0x5, 0x8b}, {0x81, 0x7, 0x0, 0x9}, {0x2a6d, 0x1, 0x2, 0x1ff}, {0x400, 0x0, 0x3, 0x5c}], {0x6f96, 0x7, 0x2, 0x8000000000000001}, {0x7, 0xa3e, 0x7, 0x800}}})
poll(&(0x7f0000000fc0)=[{r7, 0x80}], 0x1, 0xfffffff8)
r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000001000), 0x40560, 0x0)
ioctl$BIOCSETWF(r8, 0x80104277, &(0x7f0000001080)={0x4, &(0x7f0000001040)=[{0xa36, 0x0, 0xbd, 0x3}, {0xfff, 0x9, 0x8, 0x400}, {0x1, 0x6b, 0x2, 0xc7}, {0x34c9, 0x6, 0x2, 0x3}]})
ioctl$TIOCSDTR(r5, 0x20007479)
ioctl$TIOCCHKVERAUTH(r5, 0x2000741e)

601.877973ms ago: executing program 5 (id=502):
r0 = socket(0x2, 0x4001, 0x0)
r1 = dup(r0)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)="673bb5b8cc0c16ed08f1b8d24e2217f981a86a78ef1d357e382526b157159c54cba16c653271aeabc1b7", 0x2a}], 0x6)
sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x101)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xb4)
ioctl$VNDIOCSET(r2, 0xc0387200, &(0x7f0000000240)={0x0, 0x100, 0x0, 0xffffff0f})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x18, 0x401}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket(0x18, 0x2, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x4a}, 0x2, &(0x7f0000000080)="6be3d20afe6285c2d55dbce32a7a4199", &(0x7f00000000c0)=0x10, &(0x7f0000000100)="c63c7ad7eb829b7f79107a656f33", 0xe)
sendmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x401}, 0xc)
ioctl$FIONREAD(r1, 0xc028698b, &(0x7f00000001c0))

569.620217ms ago: executing program 7 (id=503):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x8)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2, 0x3c, 0x66, 0x0, 0x0, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x2, 0x0, 0xfffd, {[@sack={0x5, 0x12, [0x2280, 0x6, 0xef2, 0x2]}]}}}}}}})
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x11b)
ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000080))

522.254824ms ago: executing program 0 (id=504):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000180)={'tap', 0x0})
sendmsg(0xffffffffffffffff, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/113, 0x71}, 0x1802)
accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, ""/93}, &(0x7f00000001c0)=0x5f)
recvfrom$unix(0xffffffffffffff9c, &(0x7f00000003c0)=""/70, 0x46, 0x800, &(0x7f0000000480)=@abs={0x0, 0x0, 0x3}, 0x8)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61})
r1 = syz_open_pts()
close(r1)
r2 = syz_open_pts()
ioctl$FIOASYNC(r1, 0x80047470, &(0x7f0000000000)=0x1)
open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166)
ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r3, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
r4 = kqueue()
kevent(r4, &(0x7f0000000080), 0xe4a, 0x0, 0x4000a9fa, 0x0)
setrlimit(0x1, &(0x7f00000011c0))
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000080)=""/43, 0x24}], 0x1000000000000247)
ioctl$FIOASYNC(r2, 0x80047460, &(0x7f00000000c0)=0x4)
syz_emit_ethernet(0x1000e, &(0x7f0000000500)=ANY=[@ANYBLOB="5fbc953311f537b9c59c2b9d552cf8226d7676180e26515de312133f0737265e068bb045872d067dd886e8debf63616114a7c0ba6e14c64a709a3043795b27febc3240924c4b84fd6de1906f55ed765beb61cb63e753c206a40a82d3659c0570457c0b788e1ca56de04a5f43119d1abb17def9a1090e06a5352e4cc0242ee5a07abef4a326e0793197a392b924214f4e134b866969e998a759e0c47b6f51d42dbfb190787ba6808b01bc9d6a07b04614eceb005bc97d3657537470af52616d8fe722c3a42a492cb08788b9d85137c334c53e291465cfca9cd4532f888ae26051f442f2"])

521.844974ms ago: executing program 7 (id=505):
mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e)
syz_emit_ethernet(0x73, &(0x7f00000008c0)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x65, 0x66, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2, 0x0, 0xfffd}, {"28293841161dca18464b88067b4376d4a7380f0dd016744f6b360f7a4226c73275ac599d29bb5d17b36bf6d652b683c62fd12fd3d124bbc576d839ef01"}}}}}})
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x82, 0x0)
mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x281b9a)
open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120)
write(r0, &(0x7f0000000500)="d5d32207", 0x4)

521.536483ms ago: executing program 5 (id=506):
r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x6)
acct(0x0)
acct(&(0x7f0000000080)='./file0\x00')
select(0x40, &(0x7f0000000000)={0xffffffffffffbffb, 0x3, 0x7, 0x3, 0x2, 0x7, 0x7ffb, 0x2}, 0x0, 0x0, 0x0)
ioctl$WSKBDIO_SETENCODING(r0, 0x80045710, &(0x7f00000000c0)=0x61)
fcntl$setown(r0, 0x6, 0x0)
sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0)

324.755963ms ago: executing program 6 (id=507):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0xffff, 0x2000, 0x0, 0x0)
setrlimit(0x8, &(0x7f0000000980)={0x42, 0x60})
close(0xffffffffffffffff)
syz_open_pts()
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000340)={0x0, 0x5, 0xffffdf82, 0xffffff8d, "08ed95990000000000006000ff61b30000ffffe6", 0x4000001, 0x20000})
writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1)
ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f00000000c0)={0x7b, 0xffffffff, 0x8, 0x7, "75b18dec8c30a6b7ddd051558ccd09c7db35622f", 0xff0, 0x8})

324.048672ms ago: executing program 6 (id=508):
r0 = socket(0x11, 0x3, 0x0)
getsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async)
open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7941)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x8, 0x8c)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x3}, 0xc)
ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x51d73188af82c397, 0xffffffffffffffff)
r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) (async)
open(&(0x7f0000000000)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79c9) (async)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) (async)
open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) (async)
select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809ea0, 0xffffffffffffffff, 0x7, 0x2800000000000000, 0x181c, 0x7, 0x2000000000000004}, 0x0, 0x0, 0x0) (async)
select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) (async)
ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0x9711e361c498d1f2, 0x0) (async)
getrusage(0xffffffffffffffff, &(0x7f00000001c0)) (async)
r3 = socket$inet6(0x18, 0x4000, 0xe)
r4 = accept(r3, &(0x7f0000000340)=@un=@abs, &(0x7f0000000380)=0x8) (async)
writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)='#!', 0x2}, {&(0x7f00000002c0)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c9593ac89e994b85a05915eaffac51de05a87b8b893e09000000d886eafbe03881d25b7b59f701322b3a109a13436e486b0a6eee", 0x62}], 0x2)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt(r5, 0x0, 0x3, &(0x7f0000000000), 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async)
recvmmsg(r0, &(0x7f0000000100)={&(0x7f0000000180)={&(0x7f0000000480)=@un=@file={0x0, ""/520}, 0x20a, 0x0, 0x0, 0x0}}, 0x10, 0x2, 0x0)
setsockopt$sock_timeval(r4, 0xffff, 0x1005, &(0x7f00000003c0)={0x9, 0x4}, 0x10)

323.547706ms ago: executing program 2 (id=509):
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0)
dup2(r1, r0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0)
rename(&(0x7f0000000380)='./file0\x00', &(0x7f0000000240)='./file0/file0/file0\x00')
mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6dc)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x20, 0x51)
ioctl$TIOCFLUSH(r2, 0x80047476, &(0x7f0000000080)=0x82)
mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe04)
open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a)
select(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={0x3ff}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffd722ca6fdffa0800450000300000000000019078ffffffffe00000010c009078000000004500fffc000000ffff"])

278.024307ms ago: executing program 6 (id=510):
sysctl$kern(&(0x7f0000000040)={0x1, 0x48}, 0x2, &(0x7f0000000300), 0x0, 0x0, 0x0)
select(0x40, &(0x7f0000000180)={0x3205, 0x44809e9a, 0x7fffffffffffffff, 0x5, 0x2000000000000000, 0x181c, 0x1, 0x7}, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1)
sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501600000000000000007000000330002000000000000f96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236de351e2f0ac3ebbc257699a5f139b672f4d335d223e7d026ba8af6300372821", 0x61, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket(0x11, 0x3, 0x0)
sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)
getsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f00000001c0)=""/179, &(0x7f00000000c0)=0xb3)

276.348672ms ago: executing program 5 (id=511):
setgid(0xffffffffffffffff)
getgid() (async)
close(0xffffffffffffffff) (async)
r0 = socket(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x20, 0x0, 0x0)
connect$unix(r0, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
ioctl$BIOCGRTIMEOUT(0xffffffffffffffff, 0x4010426e, 0x0) (async)
ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async, rerun: 32)
openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32)
getpgid(0x0) (async)
mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x4400) (async)
openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async, rerun: 64)
ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504449, &(0x7f0000000740)={0x2000003, 0x10, 0x0, 0x1, "97a2224f08c246ffebb1786b47c100", 0xbd, 0x8}) (async, rerun: 64)
r1 = open(&(0x7f0000001d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x110)
fcntl$setown(r1, 0x6, 0x0) (async)
setgroups(0x0, &(0x7f0000000180))
ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x7, 0x1, 0x1, 0x820751a, "090e4de6d30aa692318c7e0002e9ffffff00", 0x20000, 0x4000000}) (async)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x5a}, 0x2, &(0x7f0000000140)='q\x00'/14, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240)="0003521e", &(0x7f0000000100)=0x64, &(0x7f0000001900), 0x4) (async, rerun: 64)
mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) (async, rerun: 64)
syz_emit_ethernet(0x22, &(0x7f00000002c0)={@broadcast, @random="c7a2e46f05fa", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @multicast1}}}}}) (async)
sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x2, &(0x7f0000000040)="71f91e3471ac0044bc5aa34b8e5f84cf71b59c7a08c53e92a055e00a2dfd5fbdb507cb05aff1bd51f88b46b220378dcb6f1c00"/60, &(0x7f0000000080)=0x3c, 0x0, 0x0)

272.325012ms ago: executing program 3 (id=512):
r0 = socket$inet(0x2, 0x2, 0x0)
close(r0)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1)
setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000)={0xdd, 0x1000}, 0x10)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00000020000000", 0xc)

271.719042ms ago: executing program 2 (id=513):
r0 = socket(0x11, 0x3, 0x0)
sendto$unix(r0, &(0x7f0000000200)="b1000502000000000000003401000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc256699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x2b)
fcntl$getown(r0, 0x5)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
bind$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x2}, 0x8)
r2 = socket(0x2, 0x1, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0x69, &(0x7f0000000140)={{0x18, 0x1, 0x32e, 0x3}, {0x18, 0x2, 0x3, 0x4}, 0x9, [0x7f, 0x2, 0x2, 0x28b6ddc5, 0x7bc1, 0x34b5273c, 0x7, 0x3d0f4652]}, 0x3c)
shutdown(r2, 0x1)
ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504446, &(0x7f00000000c0)={0x2, 0xffff0691, 0x4, 0x0, "97a2e900", 0x7})
sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffef1)
shutdown(r2, 0x2)

164.614984ms ago: executing program 6 (id=514):
r0 = socket(0x18, 0x1, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0)
r1 = fcntl$dupfd(r0, 0x2, r0)
close(r1)
socket(0x18, 0x4001, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0)
unveil(0x0, 0x0)
unveil(&(0x7f0000000000)='./file0\x00', 0x0)
recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfdec, &(0x7f0000000180)=""/42, 0x33}, 0x1042)

164.139547ms ago: executing program 2 (id=515):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[])
syz_extract_tcp_res(0x0, 0x3, 0x9)
msgctl$IPC_SET(0x0, 0x1, 0x0)
r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0})
r2 = socket$inet(0x2, 0x1, 0x0)
ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000100))

163.541953ms ago: executing program 1 (id=516):
mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e)
select(0x40, &(0x7f0000000180)={0x1d5d3, 0xf9, 0x3, 0x80000003, 0x4, 0x181c, 0x4, 0x2}, 0x0, 0x0, 0x0)
r0 = kqueue()
kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102)
ioctl$FIONREAD(r1, 0xc0286988, &(0x7f0000000100))
ioctl$TIOCGTSTAMP(r1, 0x4010745b, &(0x7f0000000040))
r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x22)
ioctl$FIONBIO(r2, 0x82907003, 0x0)
ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x8, 0x100, {0xff, 0xffffffffffffffb7}})
sysctl$hw(&(0x7f0000000000)={0x4, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
sysctl$net_inet_ip(&(0x7f0000000000), 0x4, 0x0, 0x0, 0x0, 0x0)
ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x10000, 0xffffffb7, 0x9f, 0x1, 0x2, 0x8000, 0x8000003e, 0x2, 0x2, 0x8, 0x10001})
msgget$private(0x0, 0x9)
mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c)
r3 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0)
ioctl$WSMUXIO_INJECTEVENT(r3, 0x80185760, &(0x7f0000000140))
read(r3, &(0x7f0000000440)=""/94, 0x5e)
syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x10, 0x11, 0x0, @rand_addr="ffff0000000000edffffff00", @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x2f}], @udp={{0x0, 0x2, 0x8}}}}}}})
lseek(r0, 0x5, 0x1)
setrlimit(0x8, 0x0)
ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f0000000080)={0xbd, 0x7fffffff, 0xffd7fdff, 0xfffffffd, "09032e4faceb089b351c0a164dc016b0763047c9", 0x26, 0x4})
syz_emit_ethernet(0x32, &(0x7f0000000080)={@broadcast, @local, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0xff, 0x1, 0x0, @empty, @empty=0x500, {[@ra={0x94, 0x6, 0x80000001}]}}, @icmp=@info_reply={0x10, 0x0, 0x0, 0x9, 0x74}}}}})
open(&(0x7f00000001c0)='./file0\x00', 0x2, 0x10c)
ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1)
dup2(r0, r2)

162.062518ms ago: executing program 3 (id=517):
ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x6, 0x1000004, 0x7, 0x545, "22f006000000009ba340c3000000000000007600", 0x3, 0xf})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = socket(0x11, 0x3, 0x0)
sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000200)=ANY=[@ANYBLOB="89ffa22f3c25aaaaaaaaaabb86dd60f61900001c0600fe8000000000000000000000000000bb0d000000000d000000080000000313004e221770", @ANYRES32=0x41424344, @ANYRES64=0x0, @ANYRESDEC])
poll(0x0, 0x0, 0xfffffffb)
r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
setuid(0xffffffffffffffff)
r2 = socket(0x18, 0x2, 0x0)
setsockopt(r2, 0x1000000000029, 0x3c, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4)
r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80105728, &(0x7f0000000340)={&(0x7f0000000140)=[{0x100}, {0x41, 0x20ff}], 0x2})
ioctl$WSMOUSEIO_GETPARAMS(r1, 0x80105727, &(0x7f00000002c0)={&(0x7f0000000280)})
mknod(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
socket(0x10, 0x8000, 0x8)
mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x0)
rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)='./file2\x00')
symlink(&(0x7f0000001340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x14}, 0x4, &(0x7f0000000400), 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000140)="e84940a5d9e55947f0e17ac3472e454ef8b2f3f9b261abcd5c031564d518b83171fe78c280893ef62a49700fbe5caf59c3a23de04f3a83b4265f2c4d000d42a8c3a26d16b99e4952350d1c83c72fbd0f5caf201d098118b4caeb774dfcfcc82661f04594da771ac2d980fb3390d3a13ba8d4a2", 0x73)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
select(0x0, 0x0, 0x0, &(0x7f0000000380)={0xd, 0x2, 0xffff, 0x5, 0x2, 0x5, 0xb682, 0xded}, 0x0)
mlock(&(0x7f0000213000/0x2000)=nil, 0x2000)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f0000000040)=""/86, 0x56}, {&(0x7f00000000c0)}], 0x3, 0xe)

161.024181ms ago: executing program 5 (id=518):
r0 = socket(0x18, 0x1, 0x0)
r1 = dup(r0)
ioctl$WSMUXIO_LIST_DEVICES(r1, 0xc1045763, &(0x7f0000000200)={0xf, [{0x2, 0x9}, {0x2, 0x200}, {0x2, 0x8001}, {0x1, 0x3}, {0x1, 0xfff}, {0x3, 0x7}, {0x3, 0x8000763}, {0x3, 0x11}, {0x1, 0x7f}, {0x3, 0x5}, {0x2, 0x9}, {0x3, 0x240000}, {0x3, 0xe48}, {0x1, 0x14000}, {0x0, 0x3}, {0x3, 0x380000}, {0x1, 0x2}, {0x1, 0xfffffc00}, {0x3, 0x7}, {0x3, 0x99}, {0x1, 0x8}, {0x2, 0x200004}, {0x1, 0x5}, {0x2, 0xf}, {0x0, 0x2}, {0x1, 0x6}, {0x3, 0x7}, {0x2, 0x81ba}, {0x2, 0xfffffffd}, {0x1, 0x40002}, {0x3, 0x7}, {0x3, 0x6}]})
r2 = syz_open_pts()
link(0x0, &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sysctl$kern(&(0x7f0000000040)={0x1, 0x35}, 0x2, 0x0, 0x0, 0x0, 0x0)
fchmod(r2, 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x80000001, [{0x2}, {0x0, 0xeffffffe}, {}, {0x0, 0x56}, {0x0, 0x400}, {0x0, 0x8}, {0x0, 0x8}, {}, {0x5, 0x3}, {0x2, 0x7fb6}, {0x3}, {0x3, 0x400}, {0x3, 0xd03}, {0x1}, {}, {0x3, 0x1ff}, {0x1, 0x8}, {0xc3af572159119000, 0xfffeffff}, {}, {}, {}, {0x1, 0xfffffffc}, {0x406e0f656ed361f}, {}, {0x3, 0xffff7ffc}, {0x2}, {}, {0x1}, {0x1, 0x8}, {0x3}, {}, {0x0, 0x1}]})
sysctl$kern(&(0x7f0000000080)={0x1, 0x31}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0)
sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1000000", 0x4)
sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x14}, 0x4, 0x0, 0x0, &(0x7f0000000040)="be0673a8", 0x4)
syz_open_pts()
r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110)
preadv(r3, &(0x7f0000000080)=[{0x0}], 0x1, 0x6)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1)
syz_open_pts()

6.310905ms ago: executing program 7 (id=519):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x8, 0x1a1)
linkat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x4)
r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x43)
linkat(r1, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x4)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4813, r2, 0xc142)
r3 = getpid()
fcntl$lock(r0, 0x9, &(0x7f00000001c0)={0x2, 0x1, 0xa45, 0x5, r3})
syz_open_pts()
chdir(&(0x7f0000000200)='./file0\x00')
ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000240)=0x80008)
ioctl$WSDISPLAYIO_GETEMULTYPE(r0, 0xc014575e, &(0x7f0000000280)={0xb, './file0\x00'})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendto$unix(r4, &(0x7f0000000300)="7c35e484720624c6b5627dcc51a87cc34884e5c2b17cb954b4bbe06cec494a00179a86ebd974d8dd0c295f27335c25e40bd65b1ae51456d6d96f8df12cd572a30ec4847eecd0b5b3123bcb2851be5ff30fa8fc1e20d41cb8d74d9850fee7c67aea822fe456fac9e90f6ec7e44a4d165769d718e8804fab04fccb9df88910f82b5184ef0de9064bcb118188576b82cbcc8b9c11e3d985ef9c6d41e68b91c6d45ab3f4f57e94735671a6b6b6e8a6", 0xad, 0x4, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x2}, 0x8)
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000400)={0x0, <r6=>0x0}, &(0x7f0000000440)=0xc)
getsockopt$SO_PEERCRED(r5, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, <r7=>0x0, <r8=>0x0}, 0xc)
lchown(&(0x7f0000000480)='./file0\x00', 0xffffffffffffffff, r8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
setuid(r6)
r9 = open$dir(&(0x7f0000000540)='./file0\x00', 0x10000, 0x44)
fchownat(r9, &(0x7f0000000580)='./file0\x00', r7, r8, 0x6)
renameat(r1, &(0x7f00000005c0)='./file0\x00', r9, &(0x7f0000000600)='./file0\x00')
chmod(&(0x7f0000000640)='./file0\x00', 0x1)
pipe(&(0x7f0000000680)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$WSKBDIO_SETENCODING(r11, 0x80045710, &(0x7f00000006c0)=0xb7)
connect$unix(r10, &(0x7f0000000700)=@abs={0x1, 0x0, 0x3}, 0x8)
linkat(r10, &(0x7f0000000740)='./file0\x00', r2, &(0x7f0000000780)='./file0\x00', 0x4)
r12 = syz_open_pts()
fcntl$setown(r12, 0x6, r3)
readlinkat(0xffffffffffffffff, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)=""/10, 0xa)

0s ago: executing program 0 (id=520):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000ffff000001"], 0x42, 0x5}, 0x40a)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/201, 0xc9}], 0x1, 0x0}, 0x1000)
sendmmsg(r3, &(0x7f0000000040)={0x0, 0x7}, 0x10, 0x60e)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) (async)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0)
mquery(&(0x7f00001cf000/0x3000)=nil, 0x3000, 0x4, 0x0, r1, 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.77' (ED25519) to the list of known hosts.
malloc(): allocation too large, type = 6, size = 287762939904
pckbd_enable: command error
ë’^¹¡[’4›ŒðÏn3rXKä
Òá8“‡¨@ò²$govÎcÖ®¦RöõÎСcÛë}ûú
OpenBSD/amd64 (Amnesiac) (tty00)

login: pckbd_enable: command error
kernel: protection fault trap, code=0
Stopped at      bpfdetach+0x70: movq    0(%r15),%r12
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
the kernel did not panic
ddb{1}> trace
bpfdetach(ffff80000141d800) at bpfdetach+0x70
if_detach(ffff80000141d800) at if_detach+0x1bb
tun_clone_destroy(ffff80000141d800) at tun_clone_destroy+0x2ce
if_clone_destroy(ffff80003c42d260) at if_clone_destroy+0x1d5
ifioctl(ffff8000014cd208,80206979,ffff80003c42d260,ffff8000ffffd9f8) at ifioctl+0x59d
sys_ioctl(ffff8000ffffd9f8,ffff80003c42d440,ffff80003c42d390) at sys_ioctl+0x674
syscall(ffff80003c42d440) at syscall+0xbd4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x6540fdeeef0, count: -8
ddb{1}> show registers
rdi               0xffff80002ebdc000
rsi                          0x148f9    acpi_pdirpa+0x76a
rbp               0xffff80003c42d080
rbx                       0x80206979    __kernel_virt_to_phys+0x206979
rdx               0xffff80002ebdc000
rcx                          0x148f8    acpi_pdirpa+0x769
rax               0xffffffff82a1a529    bpfdetach+0xb9
r8                                 0
r9                0xffffffffffffffff
r10               0x6cd3ced9a7009dcf
r11               0x2bf48e2db5224a24
r12               0xdead0002dead4110
r13               0xffff80000141de00
r14               0xffff80000141d800
r15               0xdead0002dead4110
rip               0xffffffff82a1a4e0    bpfdetach+0x70
cs                               0x8
rflags                       0x10246    __ALIGN_SIZE+0xf246
rsp               0xffff80003c42d050
ss                              0x10
bpfdetach+0x70: movq    0(%r15),%r12
ddb{1}> show proc
PROC (syz-executor) tid=428629 pid=8956 tcnt=2 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=32, usrpri=82, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80003c4582c0,0xffff80003c458800
    process=0xffff80003c439838 user=0xffff80003c428000, vmspace=0xfffffd806b5907c0
    estcpu=32, cpticks=1, pctcpu=0.1, user=0, sys=1, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
   278  413119  99210      0  7           0                syz-executor
   278  500998  99210      0  2   0x4000000                syz-executor
 93721   76333  42602      0  2           0                syz-executor
 93721   66700  42602      0  3   0x4000080  sbwait        syz-executor
 93721  146188  42602      0  2   0x4000000                syz-executor
 75834  443939  91745      0  2           0                syz-executor
 75834  343375  91745      0  3   0x4000080  fsleep        syz-executor
 75834  414048  91745      0  3   0x4000080  fsleep        syz-executor
 43333   25748  66741      0  2           0                syz-executor
 43333   51669  66741      0  2   0x4000000                syz-executor
 43333  382381  66741      0  3   0x4000080  fsleep        syz-executor
 41386  265959  73912     -1  3        0x90  nanoslp       syz-executor
 41386   81451  73912     -1  3   0x4000090  kqsel         syz-executor
 41386  486569  73912     -1  3   0x4000090  fsleep        syz-executor
  8956  511386  12475      0  3        0x80  nanoslp       syz-executor
* 8956  428629  12475      0  7   0x4000000                syz-executor
 75308  158775      0      0  3     0x14200  acct          acct
 12475  456946  40877      0  3        0x82  nanoslp       syz-executor
 63948  397910      0      0  3     0x14200  bored         sosplice
 15309  357988      1      0  3    0x100083  ttyopn        getty
 91745   18958  40877      0  3        0x82  nanoslp       syz-executor
 55977  226941  40877      0  3        0x82  nanoslp       syz-executor
 66741  324238  40877      0  3        0x82  nanoslp       syz-executor
 99210   49939  40877      0  3        0x82  nanoslp       syz-executor
 73912    6596  40877      0  3        0x82  nanoslp       syz-executor
  3425  143871  40877      0  2         0x2                syz-executor
 42602  470953  40877      0  3        0x82  nanoslp       syz-executor
 40877  456611   9957      0  3        0x82  kqread        syz-executor
  9957   45191  26985      0  3    0x10008a  sigsusp       ksh
 26985  404323  42047      0  3        0x98  kqread        sshd-session
 42047  246719  57366      0  3        0x92  kqread        sshd-session
 57366  200506      1      0  3        0x88  kqread        sshd
 58243  226603  26149     74  3   0x1100092  bpf           pflogd
 26149  142754      1      0  3        0x80  sbwait        pflogd
 33378  260970  18134     73  3   0x1100090  kqread        syslogd
 18134  268218      1      0  3    0x100082  sbwait        syslogd
 15977  426285      1      0  3    0x100080  kqread        resolvd
 17797  279062   7889     77  3    0x100092  kqread        dhcpleased
 42119   88606   7889     77  3    0x100092  kqread        dhcpleased
  7889  152415      1      0  3        0x80  kqread        dhcpleased
 76214  276582      0      0  3     0x14200  bored         smr
 80412  165380      0      0  2     0x14200                zerothread
  8965  109564      0      0  3     0x14200  aiodoned      aiodoned
 52491  184318      0      0  3     0x14200  syncer        update
  2380   89217      0      0  3     0x14200  cleaner       cleaner
 59399  179958      0      0  3     0x14200  reaper        reaper
 43458  427078      0      0  3     0x14200  pgdaemon      pagedaemon
  7183   26619      0      0  3     0x14200  bored         viomb
 73729  328379      0      0  3  0x40014200  acpi0         acpi0
 78670  226706      0      0  3  0x40014200                idle1
 67838  435049      0      0  3     0x14200  bored         softnet1
  9800  212722      0      0  3     0x14200  bored         softnet0
 50872  377808      0      0  2     0x14200                systqmp
 59549  156061      0      0  3     0x14200  bored         systq
 32583  451459      0      0  3     0x14200  tmoslp        softclockmp
 88595  198632      0      0  3  0x40014200  tmoslp        softclock
 85480  350922      0      0  3  0x40014200                idle0
     1  298648      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{1}> show all locks
Process 278 (syz-executor) thread 0xffff8000fffee018 (500998)
exclusive rwlock vmmaplk r = 0 (0xfffffd806b590120)
#0  witness_lock+0x5f1
#1  rw_do_enter_read+0x3e8
#2  uvmfault_lookup+0x122
#3  uvm_fault_check+0x4f
#4  uvm_fault+0x106
#5  upageflttrap+0xa9
#6  usertrap+0x3c6
#7  recall_trap+0x8
Process 93721 (syz-executor) thread 0xffff80003c459780 (146188)
exclusive rwlock unix r = 0 (0xffff800001518c88)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  socreate+0x214
#3  sys_socketpair+0xcc
#4  syscall+0xbd4
#5  Xsyscall+0x128
Process 43333 (syz-executor) thread 0xffff80003a808550 (51669)
exclusive rwlock fdlock r = 0 (0xffff8000357fb510)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  ptmioctl+0x13c
#3  VOP_IOCTL+0xac
#4  vn_ioctl+0xf8
#5  sys_ioctl+0x674
#6  syscall+0xbd4
#7  Xsyscall+0x128
Process 8956 (syz-executor) thread 0xffff8000ffffd9f8 (428629)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff839d6520)
#0  witness_lock+0x5f1
#1  __mp_acquire_count+0x58
#2  sleep_finish+0x2d8
#3  rw_do_enter_write+0x1dc
#4  lf_purgelocks+0x2f
#5  vgonel+0x47e
#6  vop_generic_revoke+0x3ea
#7  VOP_REVOKE+0x65
#8  vdevgone+0x17b
#9  bpfsdetach+0x155
#10 bpfdetach+0xa6
#11 if_detach+0x1bb
#12 tun_clone_destroy+0x2ce
#13 if_clone_destroy+0x1d5
#14 ifioctl+0x59d
#15 sys_ioctl+0x674
#16 syscall+0xbd4
#17 Xsyscall+0x128
exclusive rwlock clonelk r = 0 (0xffffffff837fd958)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  if_clone_destroy+0x67
#3  ifioctl+0x59d
#4  sys_ioctl+0x674
#5  syscall+0xbd4
#6  Xsyscall+0x128
Process 3425 (syz-executor) thread 0xffff8000ffffcf98 (143871)
exclusive rwlock fdlock r = 0 (0xffff80002a27b0e8)
#0  witness_lock+0x5f1
#1  rw_do_enter_write+0x419
#2  doopenat+0x18e
#3  syscall+0xbd4
#4  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10206  11172K   11354K 166960K     11837        0
            pcb    17     14K      16K 166960K       189        0
         rtable   186      7K      10K 166960K       379        0
             pf    33     17K      24K 166960K       137        0
         ifaddr    39      6K       7K 166960K        73        0
        ifgroup    51      2K       2K 166960K       111        0
         sysctl     3      1K       9K 166960K         8        0
       counters    66     36K      38K 166960K       120        0
       ioctlops     0      0K       8K 166960K      1571        0
            iov     0      0K      28K 166960K        45        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1361     86K      87K 166960K      1805        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K        13        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K       133        0
        dirhash    12      2K       2K 166960K        15        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    17     61K     240K 166960K       680        0
          sigio     0      0K       0K 166960K        10        0
           proc    72    115K     164K 166960K       614        0
        subproc    72      4K       4K 166960K        81        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        79        0
       in_multi    88      6K       7K 166960K       153        0
    ether_multi     1      0K       0K 166960K        12        0
            mrt     1      0K       0K 166960K        10        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   103    466K     466K 166960K       103        0
           exec     0      0K       1K 166960K       444        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         3        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   248    168K     185K 166960K      7917        0
       UVM aobj    21      2K       4K 166960K        25        0
     pinsyscall    42     84K     104K 166960K      1790        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        31        0
            NDP    13      0K       2K 166960K        47        0
           temp    57   8651K    8779K 166960K     39957        0
         kqueue    13     20K      30K 166960K       138        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      139    0      135     2     0     2     2     0     8    1
rtentry    176      121    0       44     5     0     5     5     0     8    0
unpcb      144      305    0      281     2     0     2     2     0     8    1
syncache   336        7    0        7     3     2     1     1     0     8    1
tcpqe       32        3    0        3     1     0     1     1     0     8    1
tcpcb      736      272    0      263    13    11     2     7     0     8    1
arp        136       12    0        3     1     0     1     1     0     8    0
inpcb      328      773    0      760    12    10     2     7     0     8    0
nd6        152       19    0        4     1     0     1     1     0     8    0
pkpcb       40        4    0        4     2     2     0     1     0     8    0
kcovpl      48        9    0        1     1     0     1     1     0     8    0
ppxss      1192      20    0       20     1     0     1     1     0     8    1
pppxif     1504       1    0        1     1     0     1     1     0     8    1
pffrag     232       13    0        8     1     0     1     1     0   482    0
pffrnode    88       11    0        6     1     0     1     1     0     8    0
pffrent     40       17    6       11     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfrktable  1344      14    0       14     2     1     1     1     0     8    1
pfanchor   1288       6    0        2     2     1     1     1     0     8    0
pftag       88        4    0        4     2     1     1     1     0     8    1
pfstitem    24       57    0       12     1     0     1     1     0     8    0
pfstkey    128       57    0       12     2     0     2     2     0     8    0
pfstate    384       57    0       12     5     0     5     5     0     8    0
pfrule     1344      27    0       22     2     1     1     2     0     8    0
rttmr      136        1    0        1     1     0     1     1     0     8    1
art_heap8  4096       3    0        0     3     0     3     3     0     8    0
art_heap4  256      586    0      195    28     2    26    28     0     8    1
art_table   40      589    0      195     5     0     5     5     0     8    0
art_node    32      120    0       53     1     0     1     1     0     8    0
sysvmsgpl   40        4    0        2     1     0     1     1     0     8    0
semupl     112        1    0        1     1     0     1     1     0     8    1
semapl     112      130    0      120     1     0     1     1     0     8    0
shmpl      112       22    0        4     1     0     1     1     0     8    0
dirhash    1024      19    0        2     3     0     3     3     0     8    0
dino2pl    256     2588    0     1084    95     0    95    95     0     8    0
ffsino     296     2588    0     1084   117     0   117   117     0     8    0
nchpl      144     3537    0     1842    64     0    64    64     0     8    0
rtmask      32        8    0        8     1     0     1     1     0     8    1
uvmvnodes   80     2920    0        0    60     0    60    60     0     8    0
vnodes     216     2920    0        0   163     0   163   163     0     8    0
namei      1024   12463    0    12463     3     2     1     2     0     8    1
percpumem   16       75    0       27     1     0     1     1     0     8    0
pfiaddrpl  120        4    0        4     2     1     1     1     0     8    1
kstatmem   264       60    0       36     3     0     3     3     0     8    1
scsiplug    72        4    0        4     3     2     1     1     0     8    1
scxspl     216    20945    0    20945    10     9     1     8     1     8    1
plimitpl   152      216    0      199     1     0     1     1     0     8    0
sigapl     424      969    0      920     7     1     6     7     0     8    0
knotepl    120      494    0        0    15     0    15    15     0     8    0
kqueuepl   224      228    0      218     3     1     2     2     0     8    1
pipepl     344      231    0      204     6     0     6     6     0     8    3
fdescpl    528      949    0      918     3     0     3     3     0     8    0
filepl     160     5919    0     5690    18     5    13    17     0     8    2
lockfpl    104      332    0      329     2     1     1     2     0     8    0
lockfspl    48       84    0       81     1     0     1     1     0     8    0
sessionpl  144       27    0       18     1     0     1     1     0     8    0
pgrppl      48       45    0       28     1     0     1     1     0     8    0
ucredpl    104      776    0      761     1     0     1     1     0     8    0
zombiepl   144     1230    0     1229     1     0     1     1     0     8    0
processpl  1232     969    0      920     6     1     5     5     0     8    0
procpl     664     1968    0     1909     6     0     6     6     0     8    0
sockpl     752     1240    0     1198    22    12    10    11     0     8    5
mcl64k     65536      7    0        0     1     0     1     1     0     8    0
mcl16k     16384      3    0        0     1     0     1     1     0     8    0
mcl9k      9216       2    0        0     1     0     1     1     0     8    0
mcl8k      8192       4    0        0     1     0     1     1     0     8    0
mcl4k      4096     113    0        0    15     0    15    15     0     8    0
mcl2k      2048      27    0        0     4     0     4     4     0     8    0
mtagpl      96        3    0        0     1     0     1     1     0     8    0
mbufpl     256      208    0        0    13     0    13    13     0     8    0
bufpl      280     8763    0     2620   440     0   440   440     0     8    1
anonpl      32    13237    0        0   107     0   107   107     0   246    0
amapchunkpl 152   25868    0    25306    42    11    31    31     0   158    8
amappl16   200     3807    0     3765    34    19    15    33     0     8    4
amappl15   192        7    0        7     1     1     0     1     0     8    0
amappl14   184      121    0      109     1     0     1     1     0     8    0
amappl13   176        6    0        6     1     1     0     1     0     8    0
amappl12   168     1653    0     1622     4     1     3     3     0     8    0
amappl11   160       54    0       39     1     0     1     1     0     8    0
amappl10   152        9    0        8     1     0     1     1     0     8    0
amappl9    144      248    0      248     1     1     0     1     0     8    0
amappl8    136       21    0       18     1     0     1     1     0     8    0
amappl7    128      110    0       98     1     0     1     1     0     8    0
amappl6    120      197    0      192     1     0     1     1     0     8    0
amappl5    112      124    0      114     1     0     1     1     0     8    0
amappl4    104      318    0      298     1     0     1     1     0     8    0
amappl3     96     4383    0     4283     3     0     3     3     0     8    0
amappl2     88     1199    0     1122     2     0     2     2     0     8    0
amappl1     80    11017    0    10415    17     1    16    16     0     8    0
amappl      88     7123    0     6947     5     0     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      254    0      254     2     2     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       24    0        4     1     0     1     1     0     8    0
uaddrrnd    24      949    0      918     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      949    0      918     1     0     1     1     0     8    0
vmmpekpl   168     9777    0     9734     3     0     3     3     0     8    0
vmmpepl    168    67073    0    65057   115    11   104   115     0   357    4
vmsppl     488      948    0      918     6     1     5     5     0     8    0
rwobjpl     80    23692    0    19794    83     0    83    83     0     8    0
pdppl      4096    1906    0     1836   104    28    76    86     0     8    6
pvpl        32    19318    0        0   156     0   156   156     0   265    0
pmappl     256      948    0      918     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      293    0       47     8     0     8     8     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
ddb{0}> trace
x86_ipi_db(ffffffff837ccff0) at x86_ipi_db+0x27
x86_ipi_handler() at x86_ipi_handler+0xd9
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
end of kernel
end trace frame: 0x7355e308b330, count: -3
ddb{0}> machine ddbcpu 1
Stopped at      bpfdetach+0x70: movq    0(%r15),%r12
ddb{1}> trace
bpfdetach(ffff80000141d800) at bpfdetach+0x70
if_detach(ffff80000141d800) at if_detach+0x1bb
tun_clone_destroy(ffff80000141d800) at tun_clone_destroy+0x2ce
if_clone_destroy(ffff80003c42d260) at if_clone_destroy+0x1d5
ifioctl(ffff8000014cd208,80206979,ffff80003c42d260,ffff8000ffffd9f8) at ifioctl+0x59d
sys_ioctl(ffff8000ffffd9f8,ffff80003c42d440,ffff80003c42d390) at sys_ioctl+0x674
syscall(ffff80003c42d440) at syscall+0xbd4
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x6540fdeeef0, count: -8